We believe that a holistic approach to information security is required. One that focuses on employees, all assets and the organization.